A phishing platform dubbed ZeroTokens allows attackers live visibility into victim sessions and the ability to change subsequent prompts in real time, allowing attacks to adapt in real time while targeting credentials and financial information. The platform allowed an operator to monitor information entered by victims and steer individual phishing flows while separately using the harvested data against the genuine institution. Abnormal AI published its analysis of the campaign on August 25. It found that more than 45,000 messages were sent to over 24,000 recipients across more than 700 organizations. Some 24,000 messages were sent on a single peak day, according to the research. Live Operators Control Each Phishing Session The campaign used ten sender domains and nine abused SendGrid…